National Cyber Awareness System

Vulnerability Summary for CVE-2005-3116

Overview

Stack-based buffer overflow in a shared library as used by the Volume Manager daemon (vmd) in VERITAS NetBackup Enterprise Server 5.0 MP1 to MP5 and 5.1 up to MP3A allows remote attackers to execute arbitrary code via a crafted packet.

Impact

CVSS Severity (version 2.0):

CVSS Version 2 Metrics:

Solution

Failed exploit attempts may result in a denial-of-service condition.}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

US-CERT Vulnerability Note: VU#574662

Name: VU#574662

Type: Patch Information

Hyperlink:http://www.kb.cert.org/vuls/id/574662

External Source: XF

Name: netbackup-vmd-bo(22985)

Type: Patch Information

Hyperlink:http://xforce.iss.net/xforce/xfdb/22985

External Source: BID

Name: 15353

Type: Patch Information

Hyperlink:http://www.securityfocus.com/bid/15353

External Source: OSVDB

Name: 20674

Type: Patch Information

Hyperlink:http://www.osvdb.org/20674

External Source: IDEFENSE

Name: 20051110 Stack Overflow in Veritas Netbackup Enterprise Server

Type: Patch Information

Hyperlink:http://www.idefense.com/application/poi/display?id=336&type=vulnerabilities

External Source: CONFIRM

Name: http://seer.support.veritas.com/docs/279553.htm

Type: Advisory; Patch Information

Hyperlink:http://seer.support.veritas.com/docs/279553.htm

External Source: SECTRACK

Name: 1015170

Type: Patch Information

Hyperlink:http://securitytracker.com/id?1015170

External Source: CONFIRM

Name: http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html

Type: Patch Information

Hyperlink:http://securityresponse.symantec.com/avcenter/security/Content/2005.11.08b.html

External Source: SECUNIA

Name: 17503

Type: Advisory; Patch Information

Hyperlink:http://secunia.com/advisories/17503

External Source: VUPEN

Name: ADV-2005-2349

Hyperlink:http://www.vupen.com/english/advisories/2005/2349

External Source: BUGTRAQ

Name: 20060117 Re: Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit

Type: Advisory; Exploit

Hyperlink:http://www.securityfocus.com/archive/1/422157/100/0/threaded

External Source: BUGTRAQ

Name: 20060115 Veritas NetBackup "Volume Manager Daemon" Module Stack Overflow - Exploit

Type: Advisory; Exploit

Hyperlink:http://www.securityfocus.com/archive/1/422066/100/0/threaded